Privacy policy

LeDuc Address Rules ("the app") is a Shopify app made by LeDuc Systems LLC. This policy explains what data the app accesses and stores when a merchant installs it. Last updated November 5, 2026.

What the app accesses

• Checkout validations (write): to register the checkout rule that checks shipping addresses, and to store the merchant's rules on it.
• Shop details: the store's domain, used to sign in to the app.

The app does not access orders, customers, products, payments or analytics through Shopify's APIs.

Shopper data

During checkout, Shopify runs the app's checkout function inside Shopify's own infrastructure. Shopify gives the function the cart's shipping address (address lines, company, city, state, country and ZIP code), whether the delivery is shipping or pickup, and whether each product has the tag the merchant chose. The function compares the address with the merchant's rules and returns either nothing or a message to show next to a field. The shipping address is used only for this check.

The function cannot make network requests, and it has no storage. Shipping addresses are never sent to the app's server, never stored by the app, and never shared. The app does not receive shopper names, emails, phone numbers or payment details. The admin page's "Test an address" box runs in the merchant's browser; what is typed there is not sent to the server.

What the app stores on its server

Only the Shopify session data needed to keep the merchant signed in to the app (shop domain, an access token issued by Shopify, and the granted permission scopes), plus a few setup flags for the store, such as whether the rules have been saved. The rules themselves are stored in the merchant's own Shopify store, on the checkout validation.

Sharing

Data is never sold or shared. The server is hosted by Hetzner Online in Germany and only runs the app.

Retention and deletion

When a merchant uninstalls the app, the session data is deleted right away. Shopify then sends a shop/redact request 48 hours later, and anything remaining for the store is deleted. Customer data requests and customer redaction requests are answered as having no data, because the app stores none.

Your rights and contact

To ask about or delete your data, email tyler@leducsystems.com or write to LeDuc Systems LLC, 17617 N 9th St #3031, Phoenix, AZ 85022, USA.